Submit #427146: zzcms 2023 The file containsinfo

Titelzzcms 2023 The file contains
BeschreibungThe Ebak_SetGotoPak method in the file 3/Ebbak5.1/upload/class/functions.php contains files, although it is limited to only files in the/3/Ebak5.1/upload/setsave/directory, it can be used in conjunction with SQL to write non PHP suffix file getshell. This method works wonders when restricting the writing of PHP file suffixes.
Quelle⚠️ https://github.com/LvZCh/zzcms2023/issues/6
Benutzer
 LVZC (UID 74910)
Einreichung20.10.2024 12:01 (vor 2 Jahren)
Moderieren23.10.2024 09:53 (3 days later)
StatusAkzeptiert
VulDB Eintrag281562 [ZZCMS 2023 functions.php Ebak_SetGotoPak Datei erweiterte Rechte]
Punkte19

Interested in the pricing of exploits?

See the underground prices here!